$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa File: AS200226.roa (raw, json) Hash identifier: 3RzF9eEugoUfNZVPC3wYS3r9eGRNFKzcAMYCwA/T46k= Subject key identifier: 27:7C:FC:CF:D9:37:5C:4B:DB:64:D2:39:59:B4:66:FC:39:9D:60:FB Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 657358390C050886019C7E4489A10E4850A68B8C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa Signing time: Sun 05 Nov 2023 04:07:09 +0000 ROA not before: Sun 05 Nov 2023 04:02:09 +0000 ROA not after: Sun 03 Nov 2024 04:07:09 +0000 asID: 200226 IP address blocks: 2a0a:6040:3a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:73:58:39:0c:05:08:86:01:9c:7e:44:89:a1:0e:48:50:a6:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:09 2023 GMT Not After : Nov 3 04:07:09 2024 GMT Subject: CN=277CFCCFD9375C4BDB64D23959B466FC399D60FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:7c:33:e1:ee:95:38:61:29:cf:53:df:ac: 16:c1:69:c1:b1:be:d4:3a:e0:ff:b1:a3:f3:f9:25: 6a:f5:51:8c:cc:e2:f7:e3:77:2d:02:8d:68:1c:15: d6:f6:0f:39:64:c7:c7:02:bb:5a:33:dd:0d:88:79: d1:80:5a:66:ad:30:22:a4:59:07:73:d4:ab:14:95: a0:af:3b:38:be:33:a4:68:0f:8e:73:07:a2:20:d9: 0f:e5:40:ce:c3:31:e3:56:1f:b5:5c:e9:ae:09:7f: aa:2a:5a:3e:41:99:e8:77:98:eb:6b:8a:a1:59:e8: bd:f0:a3:78:a2:33:d9:0c:e4:f5:27:f0:09:65:8b: 1e:08:8b:cf:43:09:8a:93:b3:36:89:3f:a5:e7:4e: 76:37:5b:d1:a9:5e:1e:88:00:84:e0:9c:9c:e7:a4: c2:f0:43:7c:24:9f:75:99:24:ba:ec:b7:77:82:1e: ae:ef:2b:0f:1a:4e:71:82:0a:80:d6:18:47:2f:09: 52:f5:f0:b7:8f:e3:d7:2d:1e:a0:36:0d:d1:82:4d: 07:19:b3:f7:ed:0f:92:85:24:65:ae:0e:26:ee:8f: e5:80:2f:59:f7:8a:9d:25:e8:1c:ac:5e:ba:35:5b: fd:1a:16:be:a1:34:fd:86:2f:30:24:36:e4:60:30: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7C:FC:CF:D9:37:5C:4B:DB:64:D2:39:59:B4:66:FC:39:9D:60:FB X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3a00::/40 Signature Algorithm: sha256WithRSAEncryption 75:bf:be:05:75:b4:91:21:c2:92:72:13:1f:d1:c2:4b:da:f2: b0:c0:b0:f9:8e:75:85:10:aa:b9:52:be:bc:5d:87:3a:dc:d2: 83:39:af:91:db:c9:9a:5d:e0:46:e6:07:6b:20:10:05:75:43: 73:17:7e:52:ee:b6:5f:66:85:d6:2d:9e:1b:d6:51:aa:d8:11: 91:32:6c:5c:a7:3a:a6:b2:c5:73:6b:61:ac:d0:8d:e7:71:d5: be:12:57:21:5f:57:e7:c0:70:6b:ab:c3:fb:fb:0e:55:db:32: 55:4b:13:21:1b:b0:f6:0c:18:06:ed:06:f6:f4:a2:d8:25:6c: 72:7e:79:da:26:a4:72:e6:06:23:e3:29:98:8a:04:68:8f:39: 88:47:98:46:66:aa:d1:a8:38:de:b2:d9:cd:ec:3b:a3:a3:b1: 27:c0:04:fd:2c:78:18:d4:f9:e4:a9:0a:9f:e0:a3:e1:e7:66: 8e:32:cc:e0:d6:81:53:ea:1a:6f:f7:0a:4c:67:e6:6b:4d:06: 57:c2:a4:aa:c0:cd:75:31:c8:d2:4f:5d:62:c3:47:fc:81:94: 65:ba:5b:b8:97:8e:93:86:3a:f1:4e:e7:13:33:2d:bd:69:fb: 19:80:60:04:93:eb:4f:c6:ea:ca:c9:53:c2:7b:2d:0e:2f:95: b8:c0:e4:06 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZXNYOQwFCIYBnH5EiaEOSFCmi4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDlaFw0yNDExMDMwNDA3MDlaMDMxMTAvBgNV BAMTKDI3N0NGQ0NGRDkzNzVDNEJEQjY0RDIzOTU5QjQ2NkZDMzk5RDYwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyXwz4e6VOGEpz1PfrBbBacGx vtQ64P+xo/P5JWr1UYzM4vfjdy0CjWgcFdb2Dzlkx8cCu1oz3Q2IedGAWmatMCKk WQdz1KsUlaCvOzi+M6RoD45zB6Ig2Q/lQM7DMeNWH7Vc6a4Jf6oqWj5Bmeh3mOtr iqFZ6L3wo3iiM9kM5PUn8Allix4Ii89DCYqTszaJP6XnTnY3W9GpXh6IAITgnJzn pMLwQ3wkn3WZJLrst3eCHq7vKw8aTnGCCoDWGEcvCVL18LeP49ctHqA2DdGCTQcZ s/ftD5KFJGWuDibuj+WAL1n3ip0l6BysXro1W/0aFr6hNP2GLzAkNuRgMN0JAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUJ3z8z9k3XEvbZNI5WbRm/DmdYPswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDowDQYJKoZIhvcNAQELBQADggEBAHW/ vgV1tJEhwpJyEx/Rwkva8rDAsPmOdYUQqrlSvrxdhzrc0oM5r5HbyZpd4EbmB2sg EAV1Q3MXflLutl9mhdYtnhvWUarYEZEybFynOqayxXNrYazQjedx1b4SVyFfV+fA cGurw/v7DlXbMlVLEyEbsPYMGAbtBvb0otglbHJ+edompHLmBiPjKZiKBGiPOYhH mEZmqtGoON6y2c3sO6OjsSfABP0seBjU+eSpCp/go+HnZo4yzODWgVPqGm/3Ckxn 5mtNBlfCpKrAzXUxyNJPXWLDR/yBlGW6W7iXjpOGOvFO5xMzLb1p+xmAYAST60/G 6srJU8J7LQ4vlbjA5AY= -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org